PHP Malware Analysis

dl_php.php, dl_php1.php

md5: 27b4f402d1745ae1037fb8c585b5637a

Jump to: 

Screenshot
Attributes
Deobfuscated PHP code
<?php

echo "122";
Execution traces
data/traces/27b4f402d1745ae1037fb8c585b5637a_trace-1676240416.0347.xt
Version: 3.1.0beta2
File format: 4
TRACE START [2023-02-12 20:20:41.933135]
1	0	1	0.000804	393528
1	3	0	0.000855	393088	{main}	1		/var/www/html/uploads/dl_php.php	0	0
1	3	1	0.000872	393088
			0.000903	314240
TRACE END   [2023-02-12 20:20:41.933271]


data/traces/27b4f402d1745ae1037fb8c585b5637a_trace-1676259924.7599.xt
Version: 3.1.0beta2
File format: 4
TRACE START [2023-02-13 01:45:50.657765]
1	0	1	0.000190	393528
1	3	0	0.000233	393088	{main}	1		/var/www/html/uploads/dl_php1.php	0	0
1	3	1	0.000251	393088
			0.000279	314240
TRACE END   [2023-02-13 01:45:50.657892]


Generated HTML code
<html><head></head><body>122</body></html>
Original PHP code
<?php echo '122' ?>